Jump to content

Trying to Make Sense of Strange Folder in C:\WINDOWS


Recommended Posts

Posted

I have a very strange looking folder under my C:\WINDOWS folder, which if it

is not a trojan then it must be some kind of device driver install that went

very bad. I would like help identifying what it might be.

 

The folder is named:

 

C:\WINDOWS\EFUZEJYDIXC1AZ4D

 

and it contains copies of many Windows system files. The contents of this

folder are posted here:

 

http://pages.uschw.com/usenet/EFUZEJ-folde...er-contents.txt

 

Of special note is a logfile in that folder whose name and contents are

linked here:

 

http://pages.uschw.com/usenet/EFUZEJ-folder/sthdae.log

 

You may want to open that logfile in an editor other than NOTEPAD that can

hand LF only at the end of each line. Word 2003 opened it fine here.

 

In that logfile I see attempts to add device drivers, that are failing with

various messages about an invalid pin. That almost looks like Bluetooth?

 

What I find most suspicious about this folder is that it copies over so many

critical Windows system files. Why would any device installation need its

own private copies of those files?

 

--

Will

  • Replies 3
  • Created
  • Last Reply
Guest Malke
Posted

Will wrote:

<span style="color:blue">

> I have a very strange looking folder under my C:WINDOWS folder, which if

> it is not a trojan then it must be some kind of device driver install that

> went

> very bad. I would like help identifying what it might be.

>

> The folder is named:

>

> C:WINDOWSEFUZEJYDIXC1AZ4D

>

> and it contains copies of many Windows system files. The contents of

> this folder are posted here:

>

> http://pages.uschw.com/usenet/EFUZEJ-folde...er-contents.txt

>

> Of special note is a logfile in that folder whose name and contents are

> linked here:

>

> http://pages.uschw.com/usenet/EFUZEJ-folder/sthdae.log

>

> You may want to open that logfile in an editor other than NOTEPAD that can

> hand LF only at the end of each line. Word 2003 opened it fine here.

>

> In that logfile I see attempts to add device drivers, that are failing

> with

> various messages about an invalid pin. That almost looks like Bluetooth?

>

> What I find most suspicious about this folder is that it copies over so

> many

> critical Windows system files. Why would any device installation need

> its own private copies of those files?

> </span>

 

And what results do you get when you do virus/malware removal scanning?

http://www.elephantboycomputers.com/page2....emoving_Malware

 

Malke

--

MS-MVP

Elephant Boy Computers - Don't Panic!

FAQ - http://www.elephantboycomputers.com/#FAQ

Guest MARK TURNER
Posted

i have vista ultimate 64 bit and have trouble with CA INTERNET SECURITY

SUITE,it is a virus and spyware program from road runner you get free.it is

32 bit and i cannot get the virus protector to work right.i chatted online

with a ca helper and he said i have to upgrade to vista 32 bit.is there

another way to get it to work without upgrading?

 

mark0325

 

"Will" <westes-usc@noemail.nospam> wrote in message

news:9eWdnTEJ45bqhPXVnZ2dnUVZ_gednZ2d@giganews.com...<span style="color:blue">

>I have a very strange looking folder under my C:WINDOWS folder, which if

>it

> is not a trojan then it must be some kind of device driver install that

> went

> very bad. I would like help identifying what it might be.

>

> The folder is named:

>

> C:WINDOWSEFUZEJYDIXC1AZ4D

>

> and it contains copies of many Windows system files. The contents of

> this

> folder are posted here:

>

> http://pages.uschw.com/usenet/EFUZEJ-folde...er-contents.txt

>

> Of special note is a logfile in that folder whose name and contents are

> linked here:

>

> http://pages.uschw.com/usenet/EFUZEJ-folder/sthdae.log

>

> You may want to open that logfile in an editor other than NOTEPAD that can

> hand LF only at the end of each line. Word 2003 opened it fine here.

>

> In that logfile I see attempts to add device drivers, that are failing

> with

> various messages about an invalid pin. That almost looks like Bluetooth?

>

> What I find most suspicious about this folder is that it copies over so

> many

> critical Windows system files. Why would any device installation need

> its

> own private copies of those files?

>

> --

> Will

>

> </span>

Guest David H. Lipman
Posted

From: "MARK TURNER" <rturner011@woh.rr.com>

 

| i have vista ultimate 64 bit and have trouble with CA INTERNET SECURITY

| SUITE,it is a virus and spyware program from road runner you get free.it is

| 32 bit and i cannot get the virus protector to work right.i chatted online

| with a ca helper and he said i have to upgrade to vista 32 bit.is there

| another way to get it to work without upgrading?

 

| mark0325

 

 

Remove it and replace it with a Win64 compliant AV solution.

 

--

Dave

http://www.claymania.com/removal-trojan-adware.html

Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


×
×
  • Create New...